Homework 4 (10 points)
This assignment is designed to give you an opportunity to work with AccessData FTK to analyze forensic images, create a software write-blocker for USB devices and observe how hash values are changed when a filename or file is changed.
Assignment
- Chapter 4 Software Write-Blocking Exercises (Pages 107-109)
- If using the lab computers, make sure you turn USB write-blocking off and delete the icon shortcuts on the desktop when you are done with this exercise.
- Submit screen shots of your work to document completion of these steps.
- Chapter 5 Acquiring Evidence with AccessData FTK Exercises (Pages 181-188)
- Start by reading the section titled "Reviewing Background Information for a Case" on Page 181
- Use either the forensic computers in the lab, or the demo version of AccessData FTK included with your book to complete this part of the assignment.
- Print out and submit the report generated on page 188.
- Chapter 5 Hands-On Project 5-4 (Page 193)
- Chapter 5 Hands-On Project 5-5 (Page 194)
- Provide a brief write-up (no more than 1 page) summarizing the results of 5-4 and 5-5 and the significance of those results relative to digital forensics.